Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/7a87a0-8014-4605-9fb5-9e71dc24a683/1/Zqcl5OgZGjA-LNWYO2dnWCU-Gng.roa
File: Zqcl5OgZGjA-LNWYO2dnWCU-Gng.roa (raw, json)
Hash identifier: I+RSCruFUp++7kura20OEXvtisXlesMqsCyxUx5BQyI=
Subject key identifier: 66:A7:25:E4:E8:19:1A:30:3E:2C:D5:98:3B:67:67:58:25:3E:1A:78
Certificate issuer: /CN=2f93d3ba197f5ce3098bfa7700b43854eaa80e9e
Certificate serial: 01921B4B3ECF9F09BA4C36609D37465A01EF
Authority key identifier: 2F:93:D3:BA:19:7F:5C:E3:09:8B:FA:77:00:B4:38:54:EA:A8:0E:9E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/L5PTuhl_XOMJi_p3ALQ4VOqoDp4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/7a87a0-8014-4605-9fb5-9e71dc24a683/1/Zqcl5OgZGjA-LNWYO2dnWCU-Gng.roa
Signing time: Sun 22 Sep 2024 19:52:49 +0000
ROA not before: Sun 22 Sep 2024 19:52:49 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 201119
IP address blocks: 185.32.180.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/24/7a87a0-8014-4605-9fb5-9e71dc24a683/1/L5PTuhl_XOMJi_p3ALQ4VOqoDp4.crl
rsync://rpki.ripe.net/repository/DEFAULT/24/7a87a0-8014-4605-9fb5-9e71dc24a683/1/L5PTuhl_XOMJi_p3ALQ4VOqoDp4.mft
rsync://rpki.ripe.net/repository/DEFAULT/L5PTuhl_XOMJi_p3ALQ4VOqoDp4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 12:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:1b:4b:3e:cf:9f:09:ba:4c:36:60:9d:37:46:5a:01:ef
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2f93d3ba197f5ce3098bfa7700b43854eaa80e9e
Validity
Not Before: Sep 22 19:52:49 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=66a725e4e8191a303e2cd5983b676758253e1a78
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:8f:5e:de:23:28:80:04:39:c4:96:d0:cc:42:
9a:a5:9f:69:39:a3:21:73:65:a9:ff:d4:08:6a:2e:
10:38:03:fd:0c:78:bd:2d:ca:a3:0a:93:b0:48:a6:
71:c7:f6:77:7c:46:79:4f:44:59:cf:cd:a1:70:1d:
21:c2:75:65:30:2c:95:2c:3a:f8:d4:c2:e0:26:3f:
45:54:a1:5e:bd:a8:e6:ed:76:c3:e3:08:9e:33:d9:
b3:3e:8c:4a:d5:a7:23:46:fd:f5:c8:5a:32:0a:00:
a1:be:ea:17:f6:48:6b:cf:81:2f:a3:74:ee:e6:3a:
40:d6:60:8e:5a:33:57:e4:49:91:ce:6b:1b:db:7f:
81:6f:53:8f:37:d5:bc:2a:d3:32:46:6f:15:0e:ef:
12:20:4f:3f:08:12:24:19:97:25:de:c3:c7:f3:ba:
29:99:e8:7b:9a:78:5a:3f:1b:72:2f:69:ee:79:78:
1e:c9:07:b4:e3:1b:1b:63:f2:83:04:ef:cd:84:ac:
3a:7b:84:c9:eb:1f:89:df:87:c9:f5:76:49:32:a2:
62:95:ab:f6:48:bf:0c:8e:bb:d3:7c:14:13:65:86:
20:c6:e8:33:c6:7d:f3:73:67:3f:2b:28:97:91:08:
50:a9:84:28:81:e8:1b:56:bb:4c:16:bb:0a:16:aa:
0f:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:A7:25:E4:E8:19:1A:30:3E:2C:D5:98:3B:67:67:58:25:3E:1A:78
X509v3 Authority Key Identifier:
keyid:2F:93:D3:BA:19:7F:5C:E3:09:8B:FA:77:00:B4:38:54:EA:A8:0E:9E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L5PTuhl_XOMJi_p3ALQ4VOqoDp4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/7a87a0-8014-4605-9fb5-9e71dc24a683/1/Zqcl5OgZGjA-LNWYO2dnWCU-Gng.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/24/7a87a0-8014-4605-9fb5-9e71dc24a683/1/L5PTuhl_XOMJi_p3ALQ4VOqoDp4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.32.180.0/24
Signature Algorithm: sha256WithRSAEncryption
59:7f:09:99:e7:be:7e:a4:05:66:2a:b5:f7:40:69:8a:81:d0:
9e:a8:1b:1f:eb:17:44:74:0b:4c:01:2a:02:14:78:97:60:34:
e2:b2:d6:e7:5f:a6:79:32:42:b9:a6:a6:19:44:37:08:aa:93:
05:fa:7a:02:ed:7c:08:17:87:fc:cb:fb:5f:13:99:e5:7b:72:
85:ab:5b:fc:21:c6:7e:4b:fc:2b:4b:bb:85:03:71:ff:66:b6:
c8:dc:da:be:61:e6:72:d6:48:31:e8:2d:9f:15:8b:5c:29:ee:
14:bc:6e:42:ec:87:2a:f4:80:34:94:e0:4c:3b:88:43:fb:ae:
85:8c:46:2a:a2:24:2d:49:05:fd:34:83:f0:2d:6e:94:f1:f6:
86:f3:56:3b:49:6d:96:24:f6:0e:57:ac:3f:c6:e4:de:dd:4e:
ad:a7:f2:79:5d:cd:41:25:47:7a:cd:c8:de:e6:a0:d7:e8:2c:
f2:54:dd:da:a1:0e:2c:51:22:48:9e:91:a1:a5:69:e6:78:f9:
b5:44:7c:5f:1e:f8:2e:f0:39:9a:42:a1:2b:55:c7:c2:4d:31:
49:a0:b9:e1:c2:47:37:67:81:4c:a5:4f:24:cf:c7:69:16:0f:
3f:d8:a9:95:c7:a0:8f:13:e5:aa:2f:04:14:78:21:4c:b6:1d:
36:fc:e9:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 20:02:26 2024 by rpki-client on console-ams.rpki-client.org